Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa
File:                     d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa (raw, json)
Hash identifier:          S4/OefGk9H6QdulzYu5ZsOE2n6fD3YkpsGHTV5t85O4=
Subject key identifier:   2F:B3:33:73:0F:0F:F9:92:C9:DD:91:35:68:9E:61:B8:0E:C7:55:31
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A94D0D61C2685B0453333AE80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     55246
IP address blocks:        69.1.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d6:1c:26:85:b0:45:33:33:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=afcbecc9-e805-43b4-ae00-ca049d788290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:f2:6e:d0:e7:e7:c5:8c:0d:e6:09:6b:45:
                    c5:2f:56:92:4f:50:eb:be:95:49:3b:f6:a0:33:19:
                    e7:e4:82:46:2b:e1:c4:3d:6e:07:9a:83:dc:65:45:
                    15:27:8a:22:a1:22:e1:0a:75:23:cd:34:ee:a5:ec:
                    8a:6a:f1:75:6a:76:e3:4a:e6:49:6d:f9:7a:67:4c:
                    b1:87:0d:38:cb:3f:4c:4c:c8:4a:72:99:37:da:84:
                    c9:61:fb:0e:95:65:0a:f1:ed:9b:fb:26:8f:ef:85:
                    35:1d:5b:69:18:5f:72:d9:f6:c5:84:d8:f6:8c:be:
                    ed:dc:33:e4:f1:25:6b:92:1b:bc:c0:05:15:fb:82:
                    a0:9a:2f:24:4e:90:08:12:e8:79:96:9e:22:0f:36:
                    cd:3c:4f:64:79:2e:4d:45:b4:a5:18:12:12:55:2d:
                    30:a1:30:cd:ec:7b:58:66:b1:1a:15:62:2d:10:d9:
                    ce:b5:65:63:11:23:34:58:c4:b1:9e:37:1e:65:a0:
                    8b:ce:1e:4e:f7:af:9c:c2:71:ad:f0:a2:1b:76:84:
                    23:45:98:6a:c8:25:1b:48:e7:db:6b:48:08:63:34:
                    4b:7e:9a:ea:5f:24:91:0d:52:20:d9:80:ca:64:c6:
                    65:ba:af:f9:6d:59:0e:e7:26:5f:a3:65:91:ab:96:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B3:33:73:0F:0F:F9:92:C9:DD:91:35:68:9E:61:B8:0E:C7:55:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:11:6d:24:1b:aa:51:08:cb:aa:c4:d9:43:2b:ac:b3:96:6a:
         18:74:9e:81:45:00:bc:e5:bf:4f:32:3f:17:fe:22:be:3d:cf:
         56:9c:a5:59:a4:8b:04:16:26:7e:b8:6b:7f:a7:8c:ee:52:ef:
         08:3b:de:89:86:2f:54:ff:18:5c:e1:bb:1a:05:dc:16:34:ae:
         f9:0c:c3:4f:5e:78:3a:7c:2d:78:2e:3f:f4:6f:52:58:f2:23:
         2e:b9:ce:63:58:25:41:64:6b:ee:a5:88:8b:67:8b:d6:a3:00:
         f2:c0:b8:9f:e5:ad:e1:74:54:6c:2a:b2:ae:34:71:e2:eb:07:
         56:ee:5f:ca:c7:7c:88:75:9e:28:0c:2b:e4:4d:98:95:fa:f6:
         5a:a2:90:b1:5a:46:b0:de:e6:6f:6e:c7:22:63:06:45:c3:12:
         be:6f:ef:3a:15:30:cd:62:39:d9:92:4e:02:ca:e9:70:16:3f:
         74:63:51:d4:a9:a8:59:13:79:0b:64:0e:ef:e8:b6:75:b7:40:
         15:4e:86:00:a7:97:e1:64:f2:7e:68:ed:cb:0b:fd:86:71:b6:
         d1:36:f7:4c:af:1e:91:f0:c7:12:b4:02:8f:90:4c:18:5d:46:
         57:b0:e5:f1:ac:e6:55:65:db:ba:8c:fc:80:e8:b3:be:52:02:
         26:53:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:47:42 2025 by rpki-client